Method of providing assured transactions by watermarked file display verification

• US 8,924,309 B2
• Filed: 08/06/2008
• Issued: 12/30/2014
• Est. Priority Date: 08/08/2007
• Status: Active Grant

• Current Assignee: Data Locker Incorporated
• Original Assignee: Imation Corporation (Glassbridge Enterprises, Inc.)
• Inventors: Hamid, Laurence, Krahn, Darren
• Primary Examiner(s): KIM, STEVEN S
• Application Number:
  US12/186,734
• Publication Number:
  US 20090049301A1
• Time in Patent Office: 2,337 Days
• Field of Search: 705/64, 705/75, 713/176
• US Class Current: 705/75
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

Electronic transactions employing prior art approaches of digital certificates and authentification are subject to attacks resulting in fraudulent transactions and abuse of identity information. Disclosed is a method of improving electronic security by establishing a secure trusted path between a user and an institution seeking an electronic signature to verify a transaction before any request for signature and completing electronic transaction activities occurs. The secure trusted path providing the user with a predetermined portion of the request from the institution for a signature upon a personalized device that cannot be intercepted or manipulated by malware to verify that the request as displayed upon the user'"'"'s primary computing device is valid.

Claims

1. A computer server system for providing assured transactions, the system comprising:

a server device comprising;

a memory store storing a plurality of watermarks, the watermarks being unrelated to any specific transaction; and

one or more processors;

one or more non-transitory computer readable media storing computer executable instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising;

establishing, by the server device, a first communication path between a first user device and the server device via a network,

receiving, by the server device, from the first user device via the network transaction data relating to a transaction for a known user,

selecting, by the server device, a watermark from the memory store storing the plurality of watermarks, wherein the watermarks are unrelated to any specific transaction,

including, by the server device, the selected watermark in first verification data comprising first data for verification and relating to the transaction and watermark data relating to the watermark for preventing tampering with the first data,

transmitting, by the server device, to the first user device the first verification data via the first communication path,

establishing, by the server device, a second communication path between a second user device and the server device via a network, the second user device associated with the known user, and

transmitting, by the server device, to the second user device second verification data providing an indication of the selected watermark via the second communication path, wherein the second verification data comprises an index,

wherein a processor of the second user device is configured for;

retrieving indication data of the selected watermark from a memory storing a plurality of indication data of watermarks based on the index, and

providing to the user the indication data; and

receiving, by the server device, transaction verification data from the first user device; and

a transmitter configured for transmitting the first verification data to the first user device and for transmitting the second verification data to the second user device.

2. A computer server system according to claim 1 comprising:

a first interface for coupling with a peripheral memory storage device having stored therein descriptions of at least some of the plurality of watermarks, the descriptions stored in association with indications each description for being retrieved in response to a different indication.

3. A method comprising:

establishing, by a server, a first communication path between a first system and the server via a network;

receiving, by the server, from the first system via the network data relating to a transaction for a known user;

selecting, by the server, a watermark from a memory storing plurality of watermarks, wherein the watermarks are unrelated to any specific transaction;

including, by the server, the selected watermark in first verification data;

transmitting, by the server, to the first system the first verification data via the first communication path;

establishing, by the server, a second communication path between a second system and the server via a network, the second system associated with the known user; and

transmitting, by the server, to the second system second verification data providing an indication of the selected watermark via the second communication path, wherein the second verification data comprises an index;

wherein a processor of the second system is configured for;

retrieving indication data of the selected watermark from a memory storing a plurality of indication data of watermarks based on the index, and

providing to the user the indication data; and

receiving, by the server, transaction verification data from the first system.

4. A method according to claim 3 comprising:

receiving at the server digitally signed transaction verification data for authorizing the transaction.

5. A method according to claim 3 wherein the second communication path comprises a secure communication path wherein the second verification data propagates via the second communication path.

6. A method according to claim 5 wherein the first communication path comprises a secure communication path.

7. A method according to claim 3 wherein the watermark comprises image data.

8. A method according to claim 7 wherein the second verification data comprises image data for use in verifying the watermark.

9. A method according to claim 3 wherein the watermark comprises audio data.

10. A method according to claim 9 wherein the second verification data comprises audio data for use in verifying the watermark.

11. A method according to claim 3 comprising issuing to the user, by the server, authorization data comprising at least one of a digital signature, a digital certificate, a Secure Socket Layer certificate, and a certificate according to ITU-T X.509.

12. A method according to claim 3, wherein a processor of the second system is configured for:

providing to the user associated with the second system an indication of the watermark based on the second verification data; and

receiving from the user an authorization for the transaction.

13. A method according to claim 3 wherein the first verification data comprises a time signature, the time signature for use in detecting delays, the delays potentially indicative of tampering.

14. A method according to claim 3 wherein the second system comprises:

at least one of a wireless device, a personal electronic device, and a peripheral memory storage device.

15. A method according to claim 3 wherein the second verification data comprises data for use by the user associated with the second system in determining a content of the watermark, the data other than a direct indication of the watermark.

16. A non-transitory computer readable medium having stored therein computer executable programming instructions which, when executed by one or more computer processors, cause the one or more processors to perform operations comprising:

establishing, by a server, a first communication path between a first system and the server via a network;

receiving, by the server, from the first system via the network data relating to a transaction for a known user;

selecting, by the server, a watermark from a memory storing a plurality of watermarks, wherein the watermarks are unrelated to any specific transaction;

including, by the server, the selected watermark in first verification data;

transmitting, by the server, to the first system the first verification data via the first communication path;

establishing, by the server, a second communication path between a second system and the server via a network, the second system associated with the known user;

transmitting, by the server, to the second system second verification data providing an indication of the watermark via the second communication path, wherein the second verification data comprises an index;

wherein a processor of the second system is configured for;

retrieving indication data of the selected watermark from a memory storing a plurality of indication data of watermarks based on the index; and

providing to the user the indication data; and

receiving, by the server, transaction verification data from the first system.